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The uncertainty principle [T] lies at the heart 
of quantum theory, illuminating a dramatic dif- 
ference with classical mechanics. The principle 
bounds the uncertainties of the outcomes of any 
two observables on a system in terms of the ex- 
pectation value of their commutator. It implies 
that an observer cannot predict the outcomes of 
two incompatible measurements to arbitrary pre- 
cision. However, this implication is only valid if 
the observer does not possess a quantum memory, 
an unrealistic assumption in light of recent tech- 
nological advances [2j. In this work we strengthen 
the uncertainty principle to one that applies even 
if the observer has a quantum memory. We pro- 
vide a lower bound on the uncertainty of the out- 
comes of two measurements which depends on the 
entanglement between the system and the quan- 
tum memory. We expect our uncertainty princi- 
ple to have widespread use in quantum informa- 
tion theory, and describe in detail its application 
to quantum cryptography. 

Uncertainty relations constrain the potential knowl- 
edge an observer can have about the physical properties 
of a system. Although classical theory does not limit the 
knowledge an observer can simultaneously have about 
arbitrary properties of a particle, such a limit does ex- 
ist in quantum theory, where, for example, the position 
and momentum cannot be simultaneously known. This 
lack of knowledge has been termed uncertainty, and was 
quantified by Heisenberg using the standard deviation.^ 
For two observables, R and S, the resulting bound on the 
uncertainty can be expressed in terms of the commuta- 
tor j3j: 

AR-AS>l\{[R,S])\. (1) 

Inspired by information theory, uncertainty has since 
been quantified using the Shannon Entropy !4j. The 
first uncertainty relations of this type were by Bialynicki- 
Birula and Mycielski ^Sj and Dcutsch [B]. Later, Maassen 



For observable R, we denote its standard deviation AR : = 
\J {R'^) — (R)^, where (R) denotes the expectation value of R. 



and Uffink "T" improved Deutsch's result to show that 

H{R)+H{S)>\og^-, (2) 
c 

where H{R) denotes the Shannon entropy of the proba- 
bility distribution of the outcomes when R is measured. 
The term ^ quantifies the complementarity of the observ- 
ables,^ similarly to the commutator in Equation ([T]). 

One way to think about uncertainty relations is via 
the following game (the uncertainty game) between two 
players, Alice and Bob. Before the game commences, 
Alice and Bob agree on two measurements R and S. The 
game proceeds as follows; Bob creates a quantum state 
of his choosing and sends it to Alice. Alice then performs 
one of the two measurements and announces her choice of 
measurement to Bob. Bob's task is then to minimize his 
uncertainty about Alice's measurement outcome. This is 
illustrated in Figure [TJ 

Equation ([2| bounds Bob's uncertainty in the case that 
he has no quantum memory. However, if he does have 
access to a quantum memory, this bound can be beaten. 
To do so, Bob should maximally entangle his quantum 
memory with the state he sends to Alice. Then, for 
any measurement she chooses, there is a measurement 
on Bob's memory which gives the same outcome as Alice 
obtains. Hence, for any observables, R and S*, the un- 
certainties H{R) and H{S) vanish, in clear violation of 
Equation ([2|. More generally, the violation depends on 
the amount of entanglement between the system and the 
quantum memory. 

We now proceed to state our uncertainty relation. It 
holds in the presence of quantum memory and provides a 
bound on the uncertainties of the measurement outcomes 
which depends on the amount of entanglement between 
the system, A, and the quantum memory, B. Mathemat- 
ically, it is the following relation:"^ 

H{R\B)+H{S\B)>\og^-+H{A\B). (3) 

c 

Bob's uncertainty about the outcome of measurement 
R is denoted by the conditional von Neumann entropy. 



^ For non-degenerate observables, c ;= maxj ^ |{V'j|</'fe)P where 

and are the eigenvectors of R and S, respectively. 
^ A related uncertainty relation has been conjectured in the liter- 
ature [8], which is implied by the relation we derive. 
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"I measured R" 



FIG. 1: Illustration of the uncertainty game. (1) Bob sends a state to Alice, which may, in general, be entangled with his 
quantum memory. (2) Alice measures either R or S and notes her outcome. (3) Alice announces her measurement choice to 
Bob. Bob's goal is then to minimize his uncertainty about Alice's measurement outcome. 



H{R\B), which directly generalizes the Shannon entropy, 
H{R), to the case that Bob has a quantum memory, B, 
and likewise for S.'^ The additional term H{A\B) ap- 
pearing on the right hand side quantifies the amount of 
entanglement between the system and the memory. We 
discuss some instructive examples: 

1. If the state. A, and memory, B, are maximally 
entangled, then H{A\B) — — log2 d, where d is 
the dimension of the system sent to Alice. Since 
log2 ^ cannot exceed logj d, the bound ^ reduces 
to H{R\B) + H{S\B) > 0, which is trivial, since the 
conditional entropy of a system after measurement 
given the quantum memory cannot be negative. As 
discussed above. Bob can guess both R and S per- 
fectly with such a strategy. 

2. If A and B are not entangled^ then H{A\B) > 0. 
Since H{R\B) < H{R) and H{S\B) < H{S) for 
all states, we recover Maassen and Uffink's bound. 
Equation 

3. In the absence of the quantum memory, B, we 
can reduce the bound ^ to H{R) + H{S) > 
log2 ^+H{A). If the state of the system. A, is pure. 



* More precisely, H{R\B) is the conditional von Neumann entropy 
of the state IV'jXV'jl ® '^)pAB{J2j IV'jXV'jl ® 1)> where pAB 
is the joint state of the system and the memory and \ipj) are the 
eigenvectors of the observable R. 

^ In other words, the state takes the form pAB = X]j PjPa ® p'g, 
for probabilities pj and quantum states p-^ and . 



then H{A) ~ and we again recover the bound of 
Maassen and Uffink, Equation However, if the 
system. A, is in a mixed state then H{A) > and 
the resulting bound is stronger than Equation ^ 
even when there is no quantum memory. 

4. In terms of new applications, the most interest- 
ing case is when A and B are entangled, but not 
maximally so. Since a negative conditional entropy 
H{A\B) is a signature of entanglement, the uncer- 
tainty relation takes into account the entanglement 
between the system and the memory. It is there- 
fore qualitatively different from existing classical 
bounds. 

Aside from its fundamental significance, our result also 
has potential application to the development of future 
quantum technologies. One obvious candidate is in the 
field of quantum cryptography. In the 1970s and 80s, 
Wiesner [9], and Bennett and Brassard [10] proposed 
new cryptographic protocols based on quantum theory, 
most famously the BB84 quantum key distribution pro- 
tocol [lOj . Their intuition for security lay in the uncer- 
tainty principle. In spite of providing the initial intu- 
ition, the majority of security proofs to date have been 
founded on entanglement distillation and privacy amplifi- 
cation (see e.g. [TTHT5] ) , rather than the uncertainty prin- 
ciple |17j. In any cryptographic task, in order to prove 
security against a technologically unbounded eavesdrop- 
per, it is necessary to allow the eavesdropper access to 
a quantum memory. We therefore anticipate the use of 
our uncertainty relation in this field. By way of illustra- 
tion, we discuss its potential application for the task of 
quantum key distribution. 
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Based on the idea by Ekert [15], the security of quan- 
tum key distribution protocols are usually analysed by 
assuming that the eavesdropper creates a quantum state 
and distributes parts of it to the two users, Charlie and 
Diana^. In practice, Charlie and Diana do not provide 
the eavesdropper with this luxury, but a security proof 
that applies even in this case will certainly imply security 
when Charlie and Diana distribute the states themselves. 
In order to generate their key, Charlie and Diana will 
measure the states they receive using measurements cho- 
sen at random. To ensure that they generate the same 
key, they communicate their measurement choices to one 
another. In the worst case, this communication is over- 
heard in its entirety by the eavesdropper who is trying 
to obtain the key. This scenario can be seen as an in- 
stance of the uncertainty game described in the previous 
section, where Charlie and Diana take the role of Alice 
and the eavesdropper takes the role of Bob. 

We now explain how our uncertainty relation can be 
used to bound the eavesdropper's knowledge about Char- 
lie and Diana's measurement outcomes and hence guar- 
antee the security of the key. In order to use our rela- 
tion, Charlie and Diana need to bound the right hand 
side of Equation ([s]). In other words, they need to bound 
how entangled their systems are with those of the eaves- 
dropper. Remarkably, they can do so without access to 
the eavesdropper's memory. Quantum systems have the 
property that the more entangled Charlie is with Diana, 
the less entangled he is with any other systems, including 
the eavesdropper's memory. This property is often called 
monogamy of entanglement [121 HO] • Charlie and Diana 
can hence bound their entanglement with the eavesdrop- 
per by showing that they are highly entangled with one 
another, for instance by communicating some of their 
measurement results to one another and verifying that 
they violate a Bell inequality. 

Charlie and Diana can then use our uncertainty rela- 
tion, Equation ([3|, to bound the eavesdropper's infor- 

® Note that Charlie and Diana do not take the roles analogous 
to those of Alice and Bob in the uncertainty game (see later). 



mation about their measurement outcomes. If it is too 
high, they abort the protocol and discard their insecure 
key. Otherwise, they can generate a secure key. 

Uncertainties about any quantity are always measured 
relative to the knowledge of an observer. An observer 
with little knowledge will have high uncertainty while one 
with more knowledge will have less uncertainty. Previous 
uncertainty relations give useful bounds with respect to 
classical knowledge, but do not apply when the knowl- 
edge takes the form of data in a quantum memory. In 
this Letter, we have introduced an uncertainty princi- 
ple which applies to this new paradigm and uncovered a 
stark difference. A new term must be added to the classi- 
cal bound which accounts for any entanglement between 
the system and the quantum memory. We have illus- 
trated the significance of this term using the two player 
uncertainty game. Moreover, as we have illustrated using 
key distribution as an example, our uncertainty relation 
is likely to have numerous applications in quantum infor- 
mation processing. 

The full proofs of the results contained here can be 
found in the Supplementary Information at the end of 
this document. 
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Supplementary Information 

Here we present the full proof of our main result, the uncertainty relation given in Equation (3) of the main 
manuscript (Theorem [I] below). 

In order to state our result precisely, we introduce a few definitions. Consider two measurements described by 
orthonormal bases {IV'i)} and {I^a-)} on a d-dimensional Hilbert space Ha (note that they are not necessarily com- 
plementary). The measurement processes are then described by the completely positive maps 

^{tpj\p\il)j)\^j){i}^j\ and 

S : ^{(l)k\p\<Pk)\(i)k){(l)k\ 
k 

respectively. We denote the square of the overlap of these measurements by c, i.e. 

c:=max|(V',|0fe)|2. (4) 

3,k 

Furthermore, we assume that T-Lb is an arbitrary finite-dimensional Hilbert space. The von Neumann entropy of 
A given B is denoted H{A\B) and is defined via H{A\B) :— H{AB) — H{B), where for a state p on Ha we have 
H{A) -tr(plogp). 

The statement we prove is then 

Theorem 1. For any density operator pab on Ha ® T~Lb, 

H{R\B)+H{S\B)>\og^-^+H{A\B), (5) 

where H{R\B), H{S\B), and H{A\B) denote the conditional von Neumann entropies of the states {TZ ®I){pab), 
{S ®T)(pab), and Pab, respectively. 

In the next section, we introduce the smooth min- and max- entropies and give some properties that will be needed 
in the proof. 

Before that, we show that the statement of our main theorem is equivalent to a relation conjectured by Boileau 
and Renes [T]. 

Corollary 2. For any density operator pabe on Ha ® Hb ®He, 

H{R\E) + H{S\B)>\og^^. (6) 

Proof. To show that our resuh imphes we first rewrite ^ as H{RB) + H{SB) > logj \ + H{AB) + H{B). In the 
case that pabe is pure, we have H{RB) = H{RE) and H{AB) = H{E). This yields the expression H{RE)+H{SB) > 
log2 ^ -I- H{E) + H{B), which is equivalent to The result for arbitrary states pabe follows by the concavity of 
the conditional entropy (see e.g. p]). 

That ([6| implies ([5| can be seen by taking pab e as the state which purifies pab in ^ and reversing the argument 
above. □ 



1. (Smooth) min- and max-entropies — definitions 

As described above, we prove a generalized version of ([s]), which is formulated in terms of smooth min- and max- 
entropies. This section contains the basic definitions, while Section [ 5 b| summarizes the properties of smooth entropies 
needed for this work. For a more detailed discussion of the smooth entropy calculus, we refer to [3H5]. 

We use U={H) ■= {p ■ p > 0,tr/3 = 1} to denote the set of normalized states on a finite-dimensional Hilbert space 
H and U<,{H) {p '■ p > 0,trp < 1} to denote the set of subnormalized states on H. The definitions below apply to 
subnormalized states. 
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The conditional min-entropy of A given B for a state p € U<{'Hab) is defined as^ 

H^i^{A\B)p SUpi?min(A|B)p|^ , 

where the supremum is over all normalized density operators a € tl= {'Hb) and where 

Hnun{A\B)p\^ := - log2 inf{A : pab < X1a<^ ctb} ■ 
In the special case where the B system is trivial, we write i?inin(^)p instead of iJmin(v4|_B)p. It is easy to see that 

-ffmin(^)p = -l0g2 IIpaIIoo and that for p < r, Hmin{A\B)p > i?min(^|S)r- 

Furthermore, for p G U<{'Ha), we define 

-ffmax(-4)p := 21og2tr7p . 

It follows that for p < t, iJmax(^)p < ^^inax(^)T (sincc the square root is operator monotone). 
In our proof, we also make use of an intermediate quantity, denoted i?_oo- It is defined by 

H^oo{A)p := -log2Sup{A : pA > Ansupp(p^)}, 

where nsupp(p^) denotes the projector onto the support of pA- In other words, H^oo{A)p is equal to the negative 
logarithm of the smallest non-zero eigenvalue of pA- This quantity will not appear in our final statements but will 



instead be replaced by a smooth version of TJmax (see below and Section 5b). 

The smooth min- and max-entropies are defined by extremizing the non-smooth entropies over a set of nearby 
states, where our notion of nearby is expressed in terms of the purified distance. It is defined as (see 0) 



Pip,a):^^l-Fip,ar , (7) 

where F{- , •) denotes the generalized fidelity (which equals the standard fidelity if at least one of the states is 
normalized) , 

F{p,a) IIV/O® (l-trp)v/fT©(l-tra)||^ . (8) 

(Note that we use F{p,a) H-v/Pv^lli to denote the standard fidelity.) 

The purified distance is a distance measure; in particular, it satisfies the triangle inequality P{p, cr) < P{p, t) + 
P{t, a). As its name indicates, P(p, cr) corresponds to the minimum trace distance* between purifications of p and cr. 
Further properties are stated in Section |5a[ 

We use the purified distance to specify a ball of subnormalized density operators around p: 

B^p) -.^{p' -.p' eU<in),P{p,p')<e} . 
Then, for any £ > 0, the e-smooth min- and max-entropies are defined by 

Hl,^^{A\B)p := sup H,^^{A\B)p, 

^^max(^)p := , inf^ ^i?max(^)p' • 

p'eB^(p) 

In the following, we will sometimes omit the subscript p when it is obvious from context which state is implied. 



In the case of finite dimensional Hilbert spaces (as in tiiis work), 
tile infima and suprema used in our definitions can be replaced 
by minima and maxima. 

The trace distance between two states r and k is defined by 
|||r - Kill where ||rj|i = trv^TTt. 
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2. Overview of the proof 

The proof of our main result, Theorem [T] is divided into two main parts, each individuaUy proven in the next 
sections. 

In the first part, given in Section [3j we prove the following uncertainty relation, which is similar to the main result 
but formulated in terms of the quantum entropies i?min and i/_oo- 

Theorem 3. For any pab G W<('Hab) we have 

The second part of the proof involves smoothing the above relation and yields the following theorem (see Section[4|)^. 
Theorem 4. For any p G U^{Hab) o-nd e > 0, 

Hlt{.R\B)in^i)ip) + if,^ax(55)(5«i)(p) > log2 \ + Ht^MB)p -2\og^ J . 

From Theorem|4j the von Neumann version of the uncertainty relation (Theoremjl]) can be obtained as an asymptotic 
special case for i.i.d. states. More precisely, for any a € U^{Hab) and for any n € N, we evaluate the inequality for 
p — where TZ^I and S are replaced by (7?.(g)I)^" and (iS^T)*^", respectively. Note that the corresponding 
overlap is then given by 

c(")=. max |(^,J</.,,)...(V,J</.fcJP = max|(Vf"|0r)P = c". 
The assertion of the theorem can thus be rewritten as 

~"-f^mkf(^"l^")(CR.«>I)((T))»" + -^^max('S'"S")((5^I)(o.))«,. > logj - + - i?^;,, ( - - log2 " • 

Taking the limit n — > oo and then e — >■ and using the asymptotic equipartition property (Lemma [9]), we obtain 
H{R\B) + H[SB) > log2 i + H{AB), from which Theorem II] follows by subtracting H{B) from both sides. 



3. Proof of Theorem H] 



In this section we prove a version of Theorem [Tl formulated in terms of the quantum entropies i?niin and H_^. 
We introduce — J2j IV'iX'/'il and Dg = J2k \4'k){4'k\ {F>r and Ds are d-dimensional generalizations of 
Pauli operators). The maps TZ and S describing the two measurements can then be rewritten as 

a=0 
6=0 



We use the two chain rules proved in Section 5 b (Lemmas 11 and 12 1, together with the strong subadditivity of the 



min-entropy (Lemma 10), to obtain, for an arbitrary density operator ^a'B'AB, 

H^in{A'B'AB)n-H_^{A'AB)n < H,,,UB'\A' AB),^n 

< Hnun{B'\AB)n\n 



iB'A\B)n - H^iniA\B)i 



(9) 



We note that a related relation follows from the work of Maassen 
and Uffink [7] who derived a relation involving Renyi entropies 
(the order a Renyi entropy |8| is denoted Ha) and the overlap c 
(defined in Q). They showed that Ha{R)p + Hi3(S)p > logj ^, 
where ^ + -g = 2. The case a — oo, /3 — > ^ yields -ffmin(-R)p + 

-f^max(5)p > log2 
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We now apply this relation to the state ^^a'B'AB defined as foUows"'^'^: 

a,b 

where {|a)yi'}a and {|&)_B'}b are orthonormal bases on d-dimensional Hilbert spaces Ha' and Hb'- 
This state satisfies the following relations: 

H^,n{A'B'AB)n = 2\og^d + H^UAB)p (10) 
H^^{A'AB)n = \og^d + H^USB)i^s<^T){p) (11) 
< \og^d + H^UR\B)(n®i){p) (12) 

H^^M\B)n > log2- (13) 
c 

Using these in (|9| establishes Theorem |3] We proceed by showing (10|-(13). 

Relation follows because ^Ia'B'AB is unitarily related to ^ X)a fc k)('^U' ® \b){b\B' ® Pab, and the fact that 
the unconditional min-entropy is invariant under unitary operations. 

To see ([ll]), note that ^Ia'AB is unitarily related to ^ Y.a l")(«U' Y.hi^'' '^)pab{S^'' <8) 1) and that ^ Y.bi'^'' 
t)pAB{S-'>®t) = (5®I)(pAs). 
To show inequality ( [T2| , note that 

f^B'AB = ^^|6)(6|B'®^(i?^^i^^® a)PAB(i^s'^i?°® a)- 

6 a 

To evaluate the min-entropy, define A such that H„^in{B' A\B)n = — log2 A. It follows that there exists a (normalized) 
density operator as such that 

Mb'A^'^B > ^^|5)(5|B'®^(i?^i?|0l)pAs(Z?s'i?r®l)- 
b a 

Thus, for all b, 

XtA^aB > ^Y.^DlD%®t)pAB{Dg''D-^'' ®t), 

a 

and in particular, for 6 = 0, we have 

AIa^cts > ^Y^{D%®\)pab{D^'" ^t^) 

a 

= -{'R®I){pab)- 
a 



We conclude that 2~-f^»i"(^l^)('^®^)('') < Ad, from which ^ follows 



To show (131, we observe that 

^AB = ^ Y^^Dr^S ^ l)PAB(^s'^fl° ® 1) = ((^ ° ^ ^KPAb) 



ab 



The idea behind the use of this state first appeared in |9]. 
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Then, 

{{noS)®T){pAB) = {n®T) {^\(^k){(l)k\®t^A{{\<Pk){<f>k\®t)pAB)^ 

= ^ \{c^k\^j)\^ \^]){^3\® tr^((l'/'fc)(0fc| ® ^)pab) 

jk 

< max(|(0;|i/'™)P) Y^\i^j){ijj\<E)tlA{{\<PkMk\<i^^)PAB) 
jk 

= max(|(0;|V'm)P) tA®^iT:A{{\(t>k){4>k\®^)PAB) 

k 

= max iA<^PB- 
Im 

It follows that 2"'^"""(^l'^)(CK°s)»i)(p) < max/m = c, which concludes the proof. □ 

4. Proof of Theorem |4] 

The uncertainty relation proved in the previous section (Theorem [s]) is formulated in terms of the entropies -ffmin 
and -ff-oo- In this section, we transform these quantities into the smooth entropies H^^^ and -ff^axi respectively, for 
some e > 0. This will complete the proof of Theorem |4] 

Let aAB € 1^<{'Hab)- Lemma 15 applied to usb ■= {S (®2){<7ab) implies that there exists a nonnegative operator 



n < 1 such that tr((l - U'^)asB)< 3e and 

^max('S'^)(5«iI)(o-) > -^-oo (<S'i?)n(5«iI)(cr)n - 2 log2 - . (14) 

We can assume without loss of generality that 11 commutes with the action oi S because it can be chosen to be 
diagonal in any eigenbasis of ctsb- Hence, 11(5 (E) ab)^ = {S (E)I)(n(jAB^), and 

tr((l - n^)aAB) = tr((5 ® X)((l - tf)^^^)) = tr((l - n^)asB) < 3e . (15) 

Applying Theorem [3] to the operator ncr^sn yields 

+ Hn(SB) 

(5«il)(n<jn) > l0g2 - + Hnun{AB)uan ■ (16) 

Note that ncrll < a and so 

H^in{AB)nan > H^,,,[AB)„. (17) 



Using (14) and (17 1 to bound the terms in (16), wc find 

Hmm{R\B)(Ti^I)(jlaYl) + -f^max ('S'-B) (5^1) (o-) > log2 - + i?mm(^^?)cr - 2 loga - . (18) 



Now we apply Lemma 18 to pab ■ Hence there exists a nonnegative operator H < 1 which is diagonal in an eigenbasis 
of Pab such that 

tr((Il - n2)p^B) < 2e (19) 



and i7mi„(A_B)npn > H^vni{AB)p. Evaluating ([T8| for gab := HpAsH thus gives 

-ffmin(-R|^)(7?,«.i)(nnpnn) + Hl-^aASB)(s®i){npn) > logj - + Hl^-^^{AB)p - 21og2 - , (20) 
where H is diagonal in any eigenbasis of [S ®I){flpAB^) and satisfies 

tr((l - jf)IlpAB^) < 3e . (21) 
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Since pab > np^sll, we can apply Lemma 17 to {S ®T){pab) and [S ®I)(JipAB^), which gives 



{SB) [SB] 

(501) (npn) • 

(22) 



The relation ( 20 1 then reduces to 



Hra\n{R\B)^Ti(g,x)(Tmpmi) + -^^max ('5'^) (5<»I) (p) > log2 " + ^min(^^)p ^ 2 log2 - . (23) 



Finally, we apply Lemma [t] to (19) and (21), which gives 

P{pAB,ti-PABt^) < Vii 



p(npABn,nnp^Bnn) < V6e . 

Hence, by the triangle inequality 

Consequently, {TZ (E) T)(niipAB^^) has at most distance 5-y/e from [TZ ®I){pab)- This implies 

■{R\B) {R\B) 

(7?,(8ii)(nnpnn) ■ 



Inserting this in ( 23 1 gives 

-^mhf (^l-^)CR.«.I)(p) + ^max('5'P) (5.8.1) (p) > log2 " + ^^min(^^)p ~ 2 log2 - , 

which completes the proof of Theorem |4j □ 

5. Technical properties 

a. Properties of the purified distance 

The purified distance between p and a corresponds to the minimum trace distance between purifications of p and 
a, respectively ;6;. Because the trace distance can only decrease under the action of a partial trace (see, e.g., [5]), we 
obtain the following bound. 

Lemma 5. For any p E U<{H) and a G U<{H), 

\\p-a\\i<2P{p,a). 

The following lemma states that the purified distance is non-increasing under certain mappings. 
Lemma 6. For any p G hi<{'H) and a e U<{'H), and for any nonnegative operator IT < 1, 

p(npn, nan) < p(p, cr) . (24) 

Proof. We use the fact that the purified distance is non-increasing under any trace-preserving completely positive map 
(TPCPM) [B] and consider the TPCPM 

£ : p^ npn ® tr(v/i-n2pVi-n2). 

We have P{p,a) > P{E{p),E{a)), which implies F(p,a) < F{£{p),£{cr)). Then, 

F{p,a) < F{£{p),£{a)) 

= F{npn, HctH) + y/{tvp - tr(n2p))(trcr - tv{Wa)) + ^(1 - trp)(l - trcr) 

< P(npn, Hern) + ^(i - tr(n2p))(i - tr(n2cr)) 
= p(n/9n,nCTn), 

which is equivalent to the statement of the Lemma. 
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The second inequality is the relation 

^/{tTp - tr(n2p))(tr(7 - tr(nV)) + ^(1 - M(l - tra) < ^(1 - tr(n2p))(l - tr(nV)), 

which we proceed to show. For brevity, we write tip — tr{lPp) = r, tra — tr(n2o') = s, 1 — trp = t and 1 — trcr = u. 
We hence seek to show 



□ 



^^i + \/tu < ^/{r + t){s + u). 

For r, s, t and u nonnegative, we have 

+ Vtu < v^(7M^7)(7Tit) <^ rs + 2\/rstu + tu < {r + t){s + u) 

4rstu < {ru + stY 
^ Q< [ru- stf. 

Furthermore, the purified distance between a state p and its image IXpII is upper bounded as follows. 
Lemma 7. For any p S li<{'H), and for any nonnegative operator, 11 < i?, 

p(p,npn) < -^J{iipY - (tr(n2p))2. 

Vtrp 

Proof. Note that 

ll^v/npniii - {^pii^p){^pii^p) - tr(np) , 

so we can write the generalized fidelity (see ([s])) as 

i^(p,npn) = tr(np) + ^/{i - trp)(i - tr(n2p)) . 

For brevity, we now write trp — r, tr(np) — s and tr(n2p) = t. Note that 0<t<s<r<l. Thus, 

1~ F{p,UpUf = r + t-rt-s^- 2sy/{l - r)(l - t). 
We proceed to show that r(l - F{p, npn)2) - r2 + ^2 < Q: 

r(l - Tlpnf) -r^ + t^ = r (^r + t - rt - - 2sy/{l - r){l - t)^ -r"^ + t'^ 

< r{r + t-rt-s^- 2s(l - r)) - + 
= rt - r'^t + t^ - 2rs + 2r^s - rs^ 

< rt- r^t + 2rs + 2r^s - rt^ 
= {l-r){f + rt-2rs) 

< (1 - r)(s^ + rs - 2rs) 
= (1 — r)s{s — r) 

< 0. 

This completes the proof. □ 

Lemma 8. Let p G U<{'H) and a G IA<{'H) have eigenvalues ri and Si ordered non-increasingly (Vj+i < and 
Si+i < Si). Choose a basis \i) such that a ~ '^^'^ define p = X^i ^^en 

P{p.o)>P{p,o). 

Proof. By the definition of the purified distance P(-, •), it suffices to show that F{p, a) < F{p, a). 

F{p,a) - - M(l - trfj) = W^Mli 

= max Re tr(C/ \fp\fo^ 

< max Re tx(U ^/f)V sTg) 

U,V ^ V ' 



XI = F{p, a) - v/(l-trp)(l-tra). 



The maximizations are taken over the set of unitary matrices. The second and third equality are Theorem 7.4.9 and 
Equation (7.4.14) (on page 436) in [10]. Since tr/5 = trp, the result follows. □ 
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b. Basic properties of (smooth) min- and max-entropies 

Smooth min- and max-entropies can be seen as generalizations of the von Neumann entropy, in the following 
sense [5]. 

Lemma 9. For any a G ^{^{Hab), 

lim lim -i7;5,i„(A"|B"),». 

e— i-O n— >-oo n 

lim lim = H{A)^ . 

e— >0 n— >oo n 

The von Neumann entropy satisfies the strong subadditivity relation, H{A\BC) < H{A\B). That is, discarding 
information encoded in a system, C, can only increase the uncertainty about the state of another system, A. This 
inequality directly generalizes to (smooth) min- and max-entropies j3|. In this work, we only need the statement for 

Lemma 10 (Strong subadditivity for i/min O). For any p e S<{'Habc) , 

i7„,in(A|i3C)p|p < Hn,UA\B)p^p. (25) 

Proof. By definition, we have 

2-//.„.„(A|BC),|,^^ ® PBC - PABC > . 

Because the partial trace maps nonnegative operators to nonnegative operators, this implies 

2-ff„„(A|BC)Hpl^ ® PS - PAS > . 

This implies that 2~^"'°'^"^l^''''ip < 2^^°""('^l^'-^-'''ip, which is equivalent to the assertion of the lemma. □ 

The chain rule for von Neumann entropy states that H{A\BC) = H{AB\C) — H{B\C). This equality generalizes 
to a family of inequalities for (smooth) min- and max-entropies. In particular, we will use the following two lemmas. 

Lemma 11 (Chain rule I). For any p e S^CHabc) o.nd ac G S<{'Hc), 

Hniin{A\BC)p\p < Hnun{AB\C)p — i?i„in (-B | C')p ■ 

Proof. Let ac G S<{'Hc) be arbitrary. Then, from the definition of the min-cntropy we have 

PABC < 2-^"""(^I^C'),|,j^^p^^ 

This implies that 2-'f^™('4B|c)p|, < 2-^m.„(A|sc)p|p2--f^"""(-«l<^)p|- and, hence iJmin(^|-BC)p|p < i7,ni„(AB|C)p|^ - 
H„iin{B\C) . Choosing cr such that Hniin{B\C) p\„ is maximized, we obtain H„iin{A\BC)p\p < Hjnin{AB\C) p\^ — 
H„iin{B\C)p. The desired statement then follows because iJ„iin(^S|C)p|CT < Hjnin{AB\C)p. □ 

Lemma 12 (Chain rule II). For any p G S<{Hab), 

H„iin{AB)p — H^oo{B)p < H.[am{A\B)p\p. 

Note that the inequality can be extended by conditioning all entropies on an additional system C, similarly to 
Lemma [TT] However, in this work, we only need the version stated here. 

Proof. From the definitions, 

PAB < 2-^— ('4i3)i^^n,,pp(,^) 

< 2-^™(-4B)2^^-~(B)i^^p^. 

It follows that 2--f^"""(^l^)p|p < 2--f^"""(^^)2^-=°(^), which is equivalent to the desired statement. □ 

The remaining lemmas stated in this appendix are used to transform statements that hold for entropies i^min and 
Hn into statements for smooth entropies H^^^^ and i?max- start with an upper bound on H^oo in terms of H-^^^-^. 
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Lemma 13. For any e > and for any a £ S<{'Ha) there exists a projector IT which is diagonal in any eigenbasis 
of a such that tr((i? — < e and 

i?max(^)<T > H^oo{A)nan - 2 loga - . 

e 

Proof. Let a = be a spectral decomposition of a where the eigenvalues are ordered non- increasingly 

{ri+i < ri). Define the projector Ilfc := X]i>fe Let j be the smallest index such that tr(njcr) < e and define 

11:= 1 — llj. Hence, tr(ncr) > tr((T) — e. Furthermore, 

trV^ > tr(^J_l^/^) > tiiU^_ia)\\Uj_iaUj_i\\^\ 

We now use tr(nj_icrnj_i) > e and the fact that ||nj_i(Tnj_i||oo cannot be larger than the smallest non-zero 
eigenvalue of ncrll,^^ which equals 2^'^-°°*^"^-'°''° . This implies 

Taking the logarithm of the square of both sides concludes the proof. □ 

Lemma 14. For any e > and for any a G S<{'Ha) there exists a nonnegative operator 11 < 1 which is diagonal in 
any eigenbasis of a such that tr((iZ — fl'^)"') 1^ 2e and 

^max(^)<T > ^^max(^)no-n • 

Proof. By definition of H^^^^{A)„, there is a p G B^i<^) such that H^^^{A)cr — i?max(^)p- It follows from Lemmajs] 
that we can take p to be diagonal in any eigenbasis of a. Define 

p' ■= P - {p - = - W - p}+ 

where {•}+ denotes the positive part of an operator. We then have p' < p, which immediately implies that i?max(^)p' < 
^max(^)p- Furthermore, because p' < cr and because p' and a have the same eigenbasis, there exists a nonnegative 
operator 11 < 1 diagonal in the eigenbasis of a such that p' = Ilcrn. The assertion then follows because 

tr((l - n^)a) = tr(CT) - tr(p') = tr({(T - p}+) < \\p - a||i < 2e , 

where the last inequality follows from Lemma [s] and P{p, cr) < £. □ 

Lemma 15. For any e > and for any a € S<{'Ha) there exists a nonnegative operator Tl < 1 which is diagonal in 
any eigenbasis of a such that tr((jZ — lP)a-) < 3e and 

H'^^AA)„ > F_oo(A)n^n - 21og2 ^ . 



Proof. By Lemma 14 there exists a nonnegative operator 11 < 1 such that 

^max(^)CT ^ -ffmax(^)ncrn 



and tr((l — n^)cr) < 2e. By Lemma 13 applied to Ilcrn, there exists a projector 11 such that 

i^max(^)^^T^ > H_oo{A)nan - 21og2 - 

£ 

and tr((]l — Ltjllcrn) < e, where we defined 11 :— fin. Furthermore, 11, ft and, hence, 11, can be chosen to be diagonal 
in any eigenbasis of a. The claim then follows because 

tr((l - tf)cr) = tr((]l - Iin2)cr) = tr((l - &)a) + tr((U - n)ncrn) < 3e. 

□ 



If rio-n has no non-zero eigenvalue then H-oo{A)yi„yi = —oo and 
the statement is trivial. 



14 



Lemma 16. Let e > 0, let a € S<{'Ha) o,nd let A4 : a ^ \<^i){<^i\{c^i\a\<^i) he a measurement with respect to an 
orthonormal basis {\(f>i)}i. Then 

-f^raax(^)cr < ^max(^)A1(<T) ■ 

Proof. The max-entropy can be written in terms of the (standard) fideHty (see also [1]) as 

i^max(v4)^ = 2\og2 F{a A, 1a)- 

Using the fact that the fidehty can only increase when applying a trace-preserving completely positive map (see, e.g., 
[2]), we have 

F{c7A, Ha) < FiMiaA),M{lA)) = F{M{aA), 1a) • 
Combining this with the above yields 

i^max(A), < Hn^UA)Mia) , (26) 

which proves the claim in the special case where e = 0. 

To prove the general claim, let 7is and Hs' be isomorphic to Ha and let U be the isomctry from Ha to spa.n{\ipi) s <E) 
\4>i)s'}i ^ ® "Ws' defined by \(j)i)A — ^ \4>i)s |0i)s'- The action of M can then cquivalently be seen as that of U 
followed by the partial trace over Hs'. In particular, defining a'gg, := U(7aU\ we have M.[(ja) ~ f^- 

Let p' e SCHss') be a density operator such that 

Hmax{S)p' = H^^^^{S)cr' (27) 

and 

P{p'ss','y'ss')<s ■ (28) 



(Note that, by definition, there exists a state p'g that satisfies (27) with P{pg,a'g) < e. It follows from Uhlmann's 



theorem (see e.g. [Ij) and the fact that the purified distance is non-increasing under partial trace that there exists an 



extension of p'g such that (28 1 also holds.) 

Since cr^g, has support in the subspace span{|(/)i)5 ® \4>i)s'}ii we can assume that the same is true for p'ggi. To see 
this, define 11 as the projector onto this subspace and observe that ivsi(Jlp'gg,H) cannot be a worse candidate for the 
optimization in H^^^^{S)a-'- From Lemmajsj we can take p'g to be diagonal in the {|0i)} basis, i.e. we can write 

P's ^^M(t>t){(t>t\, 

i 

where > 0. We also write 

PSS' =^Cijki\(l)z){(pj\ <E) |0fc)((/>/|, 

ijkl 

for some coefficients Cijki- To ensure pg — ii^s'P'ss'^ require Cijkk — KS-ij- Consider then 

trs'(npss'n) = trs' {J2ci^ij\(|)^){(|)j\®\(|)^){(|)j 

= cuii\<i>i){(i>i\- 

i 

It follows that ti s'{Ilp'gg^Ti) < p's (since cukk = A; and cukk ^ 0) and hence we have 

-ffmax(<S')trs,(np^g,n) < H^^^{S)p'. 

Furthermore, from Lemma |6j we have 

Pinp'ss,Tl,a'ss,) = P{np'ss^Tl,Tla'ss'Tl) < P{p'ss',ct'ss') < e, 
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from which it follows that 



We have hence shown that there exists a state p'gg, satisfying (27l and (28) whose support is in span{|(/)i)5 ig) \(j)i)s'}i- 
We can thus define pA ■= U^p'ss'^ ^'^ that p'g — M{pa) and hence (27) can be rewritten as 



and (28 1 as 



P{pA,<yA) < £ 



□ 



Using this and ( 26 ) , we conclude that 

^max(^)7W(<T) = ^^max(^)7W(p) > -ffmax(^)p > i?^iax(^)<T • 

Lemma 17. Let £ > 0, and let a E S<{T-La) and a' E S<{Ha)- If o'' < (j then 

-^max(^)o"' 5: ^maxC^)^ ■ 

Proof. By Lemma [TBI applied to an orthonormal measurement A4 with respect to the eigenbasis of cr, we have 

-f^max(^)cr' < HLa:<{^) M{a') ■ 

Using this and the fact that A4{<t') < A4{(j) — cr, we conclude that it suffices to prove the claim for the case where 
cr' and a are diagonal in the same basis. 

By definition, there exists p such that P{p,a) < e and Hyaa.x{A)p — H^^^^{A)cr- Because of Lemma [sl p can 
be assumed to be diagonal in an eigenbasis of a. Hence, there exists an operator F which is diagonal in the same 
eigenbasis such that p = FcrF. We define p' := Ta'T for which p' > and tT{p') < trip) < 1. Furthermore, since 
p' < p, we have 

^^max(^)p' < -ffmax(^)p = -ffmaxC^)^ ■ 

Because cr' and cr can be assumed to be diagonal in the same basis, there exists a nonnegative operator IT < 1 which 
is diagonal in the eigenbasis of cr (and, hence, of F and p) such that cr' = ncrll. We then have 

p' ^ Ta'T = rUaUr = UTaTU = UpU . 
Using the fact that the purified distance can only decrease under the action of IT (see Lemma [6]) , we have 

P{p\ cr') = P(npn, Bern) < P(p, cr) < e . 

This implies H^-^^^^{A)^' < -ffmax(^)p' and thus concludes the proof. □ 

Lemma 18. For any e > and for any (normalized) a e 5=('Ha); there exists a nonnegative operator II < 1 which 
is diagonal in any eigenbasis of a such that tr((i/ — TP)(t) < 2e and 

^minl^)^ — ^min(^)nan • 

Proof. Let p G 'B^(cr) be such that Hmin(^)p = ^min(^)<T- It follows from Lemmalslthat we can take p to be diagonal 
in an eigenbasis \i) of a. Let (s^) be the list of eigenvalues of p (cr) and define ct^ — min(r'i, Si)\i){i\. It is easy 
to see that there exists a nonnegative operator B < 1 such that cr' = BcrB. Since cr' < p, we have 

^^min(^)ncrn — -f^min (^)cr' > Hniini^) p — Hmini^)a- ■ 

Furthermore, tr((lL — B^)cr) = tr(cr — cr') = s >r i^i ~ '"0 — II''' ^ P\\i- "^^"^ assertion then follows because, by 
Lemma [5j the term on the right hand side is bounded by 2P{a,p) < 2e. □ 
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